[stringtemplate-interest] HTML escaping

Roman Odaisky roma at qwertty.com
Fri Jan 18 13:46:21 PST 2008


Greetings,

I’m looking for a template engine for a future Web project. I really like the 
strict philosophy of StringTemplate, but could you please explain one thing:

The manual says one should use renderers for escaping. That makes sense for 
applications that generate SQL, or C, but how does one use ST for JS embedded 
in HTML? <b>hello $user$</b> and alert("hello $user$") need different 
escaping, and the possible presence of <![CDATA[ complicates things further.

WBR, Roman.


More information about the stringtemplate-interest mailing list